**This is an old revision of the document!**

Enterprise File Fabric Features

Storage and Application Connectors

Name Notes
SME Default Storage may be pre-assigned to (tenant) organizations by the Appliance Administrator. Typically used by ISPs. The SME SaaS platform uses Amazon S3
Alfresco On-Premise username / password - WebDAV like protocol
Amazon Cloud Drive username / password
Amazon S3 DES-CBC3-SHA Secure US Federal Government
Amazon S3 RC4-MD5 Secure US Federal Government
Amazon S3 Key / Secret Key Auth
Amplidata Using S3 compatible APIr
Basecamp OAuth for BaseCamp V2 - username. Password for BC V1
Box OAuth
Caringo Swarm Obj. Storage Supported using S3 compatible API
Ceph Supported using S3 compatible API
CleverSafe S3 compatible API
CloudMe username / Password Auth
Cloudian Supported using S3 compatible API
Connectria Supported using S3 compatible API
Constant Cloud Storage Supported using S3 compatible API
Documentum SME CMIS Connector
DropBox OAuth
Dump Truck WebDAV
Dunkel Storage Supported using S3 compatible API
EMC Atmos Key Auth paradigm
Egnyte WebDAV protocol
Email Archive, Backup, Index, Emails and attachments
Evernote Username / Password
FTP/FTPS/SFTP pervasive protocol, use to connect to on-premise storage
FileNet SME CMIS Connector
FilesAnywhere username / password
Gmail OAuth used to connect
Google Apps Email OAuth
Google Cloud Storage Key / Secret Key Auth
Google Docs OAuth
Google Drive OAuth
Google Sites (classic) OAuth
GreenQloud Supported using S3 compatible API
HP Cloud Based OnOpenStack
HPSS Default Authentication access
HostEurope Supported using S3 compatible API
HostingSolutions.it S3 interface API
Huddle OAuth (Enabled on request)
IBM Cloud Object Storage (COS) Supported using S3 compatible API
IBM Connection Files username / password
IBM FileNet SME CMIS Connector
iKeepinCloud WebDAV like protocol
Jive Hostname with Username / Password
LunaCloud Supported using S3 compatible API
Memset Memstore Based OnOpenStack
Mezeo Using S3 interface
Microsoft Azure Storage Key / Secret Key Auth
NemakiWare SME CMIS Connector
NetGear ReadyNas Supported using WebDAV Provider
Nifty Cloud Storage Supported using S3 compatible API
Nuxeo SME CMIS Connector
Office 365 SharePoint protocol used to connect
OneDrive OAuth
Open S3 - S3 Compatible Cloud Key / Secret key - supports any S3 compatible storage
OpenStack Swift Key tenants
OpenText SME CMIS Connector
PogoPlug username / password - API not that stable
RackSpace CloudFiles Username / API Key
Riakcs Supported using S3 compatible API
SafeSync username / password
SalesForce OAuth
Scality Using S3 compatible API
SeeWeb Cloud Storage Supported using S3 compatible API
Sharepoint SharePoint protocol used to connect
SpectrumScale (GPFS) Via OpenStack / S3 API
SugarSync username / password
SwiftStack OpenStack Key tenants
Tiscali Cloud Storage Supported using S3 compatible API
Ubuntu One username / password
Wasabi Supported using S3 compatible API
WebDAV pervasive protocol, use to connect to to on-premise storage
Zimbra username / password

Protocol / Interface Support

WebDAV WebDAV interface over any mapped cloud
SME API REST API
FTP / FTPS FTP Interface over any mapped cloud (ports 21 & 990)
SFTP SFTP Interface over any mapped cloud. (port 2200)
S3_Compatible S3 interface over any mapped cloud

User Management

Batch User Creation xls, cvs import (custom as required), AD / LDAP Import
Active Directory Integration Fully Supported. Multiple Domains and failover proxy support.
LDAP Integration Fully Supported (tested again OpenLDAP)
Single Sign on Support Active Directory, LDAP out of the box, other Identity Management systems as needed
Block devices BYOD device blocking is supported.
User Profiles User Quota management, Group/Role management

Administration

Administer Users Either SME or via LDAP or Active Directory
Administer Security Comprehensive options
Administer User Passwords Additionally set lock out controls and strong passwords
Add additional Administrators Able to limit subset of features
Administer Notifications
Administer File Events
Administer Folder Permissions Folder permissions can be different at nested levels
Administer File sharing
Administer Devices
Set User quotas
Provisioning API Supports integration with custom provisioning systems
SNMP Traps Base OS is Linux therefore all SNMP traps are fully supported.
Monitoring Base OS is Linux therefore normal monitoring tools / Apps, such as Nagios, can be used.

Secure File Sharing

Shared Folders May also password protect
Shared Folder URL Support for providing a URL where users can drop files
Shared folder permissions Via SME Identity management or AD/LDAP/SAML
Subfolder permissions Can be different to parent folder
Group / E-Room Access Supported with Business Group Workspaces
File Change Notification Configured with Audit Watch rules
Distributed File Locking
Comments and Notifications Comment collaboration can be real time
Shared file expiration and password controls Set passwords and time expiry on files
URL Shortener Use an internal or external URL shortening service for shared links
Built in messaging Send users messages via web interface. Also supported on mobile
Fax Integration By default with Interfax service
SMS Integration Ability to integrate with Twilio for SME and shared link password notifications
Data workflow rules For group/E-Room shares
Email Integration Share files direct from email Outlook Plugin, Mac Mail Plugin and also filebox to email attachments to a folder
Social Sharing Twitter, FaceBook, WordPress
Restrict / control file sharing Admin control point
File Share support on devices iOS, Android, BlackBerry, Windows Tablet, Windows Phone, other devices via HTML5 mobile App
Desktop App File Sharing Windows, Mac, Linux
Watermarking Convert documents to PDFS and add traceable watermarks.

Files (other)

Tag / Classification For easy grouping and classification of data
Unified content search Across multiple storage or data endpoints
Favorite files Favourite files for quick access across Apps and devices
Contacts Create and store contracts directly within the Cloud File Server for use with sharing
Create files Create new blank files for txt, doc, xls, ppt or html for editing
File Comments Each file has full file commenting availability; users can collaborate in real-time on comments.
Trash Bin Prevents accidental deletion and overwriting

Identity Management

SME Identity Management system Secure Token Authentication, X500 style use / directory management
Bulk Import of Users Use CSV or Excel files
Microsoft AD/LDAP or SAML Inclusive of Multi-Domain support for each IAM system
Google Identity Management Integration available
Ping Identity Management Integration available
Integration with third party providers On demand, paid engagement

Access Control Permissions

Granular shared folder permissioning support
Allow nominated users to create shared folders
Support read only access to folders
Support read-write access for users and roles to shared folders
For Shared folders set no access for users and roles
Permissions management also at shared sub folder level
Restrict access by IP address e.g office only or by country
Restrict access by Client type e.g web and Windows tools only
Restrict users who can create Shared folders
Granular control on user capabilities
Set storage Quotas per user
Set File Sharing policies Configure default time expiry, whether a password should be set and how many times a file can be downloaded
Separate Access control for business group workspaces Business Group workspaces control sharing with external users and there is a separation of concerns between internal and external sharing for security reasons

Governance

Event Auditing Comprehensive event auditing for user actions and file actions
Audit granularity Ability to set audit options around types of events to monitor
Event notification On Audit events
Audit integration Available for exports as .cvs or excel or an API is provided
Reporting on bandwidth or storage used per user, role or department
Geo location logging The platform support GEO Location features for all document uploads which records the IP address and Town / Country of Origin, and the IP Address Town / Destination Country where the upload is accepted
Administration role Admin role for each Account. Can be more than one admin
GEO Location restrictions Restrict where the server can be used from by IP address
Block device / App use As part of BYOD management capabilities devices or Apps can be blocked from use on a per user basis. The solution can also integrate with best of breed BYOD solutions such as BlackBerry Sector and Oracle Mobility.
Set File Sharing policies Configure default time expiry, whether a password should be set and how many times a file can be downloaded
End to End encryption from client to storage
Single access point for auditing and data encryption
AES 256 bit encryption of data on storage All files can be made secure using managed encryption, even if the underlying storage cloud does not support encryption. Managed encryption means that only the user who assigned the key knows it. It is not stored on our service. Any shared files that are encrypted will need to have a key entered for file access. This can also be centralised so the administrator of the Cloud sets the encryption key for all users.
Private encrypted links
Private shared time based links
Full audit on shared links
Set password for shared links
Expire shared links manually
Enable/Disable_collaboration features
Full User actions Audit Administrator can turn on event auditing and control the granularity so that all file events are logged for all users and the unique IP address is recorded against the event.
Geo Location logging The platform support GEO Location features for all document uploads which records the IP address and Town / Country of Origin, and the IP Address Town / Destination Country where the upload is accepted.

Collaboration

Shared folders with granular permission control The Organization shared folders feature enables special folders to be set that all users in the Organization will see and access the content of these folders. This is a great way to store common organization data and ensure that all users have access to company content such as Marketing, Human Resource literature etc.
Online browser editing using Zoho API key registration required. Please see here.
Collaboration with external users using business group functionality Each user has the ability create collaboration groups in which users can be invited to share content. Each member can, if required, be given permission to share content with the group and the group can be configured for all members to see each other, or not. When new files are uploaded to the group all member get an automated email informing them of the new content. It is a great way to deal with partner networks, or geographically distributed working groups.
Rules for auto sharing of files with business groups Load a file to specific folder and have a rule set that ensure it is automatically shared to business group (external users) participants
Access control for business groups You can setup download/update permissions on for business groups
File locking You can lock files if you donâ€'t want other collaborators to update the file while you are working on it
Unlimited Document_versioning support Document versions are support and you can view previous versions
Built in messaging for collaboration Messaging is built into the platform so you can send each other messages directly to other users from the web,windows or iOS platforms.
Comment on files for reviews and discuss live with colleagues Real time commenting on files directly from the web browser
Set notification for change in interesting files and folders
Unlimited Document Version support The platform provides document version support to view previous version of documents
File Sharing advanced file sharing features which include sharing files over email, Twitter and RSS. Each file also has its own unique URL. File shares can also be set to expire after a number of days for safety
Fax integration integrate with the Interfax service which enables you to send documents as faxes directly from our service. An Interfax account is needed.
Workflow rules Rules can be set on data so that you get emailed if new files are uploaded to a specific folder, or file versions changes. You can filter on certain types of file extensions or set all file extensions.
Document Approval Workflow Designated approver is notified when document is ready for review. Once approved, document becomes read-only.

Language Support

Multi-Language Support (web) using Google Translate integration Google Translate free API key required. Languages supported: Arabic, Bulgarian, Chinese (simplified), Dutch, Finnish, French, German, Hebrew, Italian, Japanese, Norwegian, Portugese, Romanian, Russian, Spanish, Swedish, and Ukranian.
translation Translation and localization for server messages and web applications
Multi-Language Support (Apps) using device localization strings.

Architecture

Scalable Architecture
Multiple Deployment options available depending on load requirements
Solution is highly available and scalable. Tested with thousands of users and millions of files Largest deployed user base is for 250,000 users
Can access data using FTPS, FTP, WebDAV, de-facto Amazon S3
Proxy Support Use a forward proxy to cloud storage
Unified Cloud Search With full search operators
Tagged files Allows for grouping of data from disparate clouds and easy search
Deep Search Search of document content for any mapped cloud (additional paid connector feature)
PII Discovery Personally identifiable information discovery and classification
Content Discovery Discover, classify and search using custom classifications

Client Apps

Web Browser Hierarchical File Manager designed to easily navigate large data sets
iOS client Native iPhone and iPad Ap
Android Client Native Android App
Windows 8 Tablet App Native Windows 8 Tablet App
BlackBerry Client Native BlackBerry App
Windows Native, Drive, Sync, Office Plug In's, Outlook Plugin, dedicated explorer App
Mac Native, Drive, Sync, Spotlight search of date in clouds, Mac Mail plugin
Linux Native, Drive, Sync, dedicated explorer App
WordPress Backup Plugin Backup WordPress data to any cloud
WordPress file share Plugin Share files from WordPress (with password an audit support)
Web Browser Plug-In's For Chrome, Safari, Firefox
SalesForce Force App App that integrates directly into SalesForce for behind the file private file sharing for SalesForce attachments.
GMail Chrome Extension Secure file attachments for Gmail (web)
FaceBook App Built for ISP's - a consumer App for FaceBook file sharing
Music Streamer App Mac only - built as proof of concept. Streams music for an mp3 file in any mapped account

Deployment Model

On-Site Use Behind corporate firewall as cloud control point
Cloud only Use
IaaS deployment Rackspace, Linode, Memset etc
EC2 Deployment
Supplied as Appliance image VM Image, Hyper-V, KVM, XEN, OVF. Can also be deployed as a virtual box image or as an OpenStack Compute image (Glance).

Customization

Branding Solution can be fully branded at the appliance and tenant level. For example, an Internet Service Provider could brand the appliance and allow their organizational customers to brand their own interfaces
Application Branding Mobile and desktop applications can be branded

Data Backup / Data Migration

Import / Export data between clouds Using SME Cloud Import / Export feature
Rapid Upload capability For object storage clouds. Windows tool only.
M-Stream™ File Transfer Acceleration for upload, download and server to server copy
Cloud to Cloud Backup Backup data from one cloud directly to another clouds
Cloud Copy / Move drag and drop directly from the web file manager
Backup Email IMAP only. Email is backed up and each file becomes a text file and is indexed for search

Data Protection

File Versioning support Supported and can be controlled by Admin. Also versioned view can be turned of in mobile and desktop apps. Web File Manager has “visual view” of versioning
SSL Transfer Admin can force https to be always on
Data at rest encryption Controlled by Cloud Admin for Team accounts
public / private key data encryption 256 bit SHA-1 AES Data encryption. Can also be integrated with other encryption systems.
Group Policy to define security settings for all users
Retention policy Data not deleted unless removed from trash
Background backup to secondary storage SME Cloud to Cloud Backup
Email Backup Any IMAP email box can be backed up and be scheduler to be backed up at regular intervals.
Large File Support SME supports chunking at an abstract level above any Cloud Provider and where cloud providers support this concept at an API level it integrates. An example of such an integration is OpenStack Swift Dynamic Large Objects which are supported.

Document Editing / Viewing

Create and Edit documents in Web Browser Uses Zoho, Google Docs and Office Online integrations or a plain text editor
Edit Documents on Android Using SME FTP and Kingston office
Edit documents on iOS Using SME WebDAV and Apple iWork or other WebDAV enabled doc editors. `the SME iOS App also allows in-app editing of text files on the Cloud using our own technology
Edit documents directly on Windows Double click on docs from the cloud drive and use native editors or use SME MS Office or Libre Office Plug Ins
Edit documents directly on Mac Double click on docs from the cloud drive and use native editors
Web document viewing SME integrates with Google viewer and so can preview a multitude of document formats that Google Viewer supports
PDF Annotations SME provides a fully featured HMTL5 PDF Annotation suite with full burn and Audit capabilities.